Utah · Mountain West US
Utah cybersecurity grants for defense contractors
Utah's defense-industrial footprint centers on Hill Air Force Base and the Ogden Air Logistics Complex in Davis County, the state's largest single-site employer, alongside Dugway Proving Ground, Camp Williams, and the Utah Air National Guard. If you hold or pursue DoD work, a CMMC gap assessment shows exactly where you stand, and the Cyber Grants Alliance grant can cover it.
CMMC Phase 2 status: under DoD review. DoD suspended the CMMC Phase 2 third-party certification requirement in July 2026 pending a program review. Phase 1 self-assessment against NIST SP 800-171 remains mandatory now, and self-certified compliance carries more liability with third-party verification on hold.
Why it matters here
Where does Utah's defense work come from?
Utah's defense economy centers on Hill Air Force Base in Davis County, one of the largest Air Force installations in the country, alongside Army testing and National Guard installations across the Wasatch Front and the west desert, creating significant contracting opportunities, and CMMC obligations, for local businesses.
Davis County (near Ogden)
Hill Air Force Base & the Ogden Air Logistics Complex
Home to Air Force Materiel Command's Ogden Air Logistics Complex, which handles depot maintenance and sustainment for aircraft and munitions, plus the 388th Fighter Wing (F-35A) and the 419th Fighter Wing (Air Force Reserve). Hill AFB is the largest single-site employer in Utah, with a significant defense-contractor presence, including a regional office of The Aerospace Corporation supporting nuclear deterrence modernization programs.
Tooele County
Dugway Proving Ground
A U.S. Army test installation roughly 80 miles southwest of Salt Lake City. Its primary mission is testing U.S. and allied chemical and biological defense systems and evaluating the survivability of defense materiel against nuclear, biological, and chemical threats.
Salt Lake & Utah counties
Camp Williams & Roland R. Wright Air National Guard Base
Camp Williams, near Bluffdale, is the primary training site of the Utah Army National Guard, spanning more than 50 square miles and hosting Army aviation units. Roland R. Wright Air National Guard Base, on the east side of Salt Lake City International Airport, is the garrison and headquarters of the Utah Air National Guard. Some sources also list Tooele Army Depot among the state's installations, though that facility is less independently verified.
Your local partner
Who is Utah's CMMC and manufacturing partner?
The University of Utah Manufacturing Extension Partnership (MEP) Center, based in Salt Lake City, is the official NIST MEP National Network representative for Utah, launched in October 2016. It offers manufacturer consulting across five service areas: Measure, Learn, Develop, Certify, and Solve.
Cybersecurity track record
In 2017, the center partnered with the Utah Procurement Technical Assistance Center (now the Utah APEX Accelerator) to run workshops on NIST SP 800-171 compliance for DoD contractors, a program that predates CMMC. Its current public site does not list active CMMC-specific services, so contractors should contact the center directly to confirm what it currently offers before relying on it as a CMMC resource.
Federal contracting support
For DFARS and CMMC-adjacent contracting questions today, the Utah APEX Accelerator (below) is the more clearly documented resource, and it works alongside the University of Utah MEP Center on manufacturer readiness.
More resources
What other cybersecurity support can Utah businesses use?
Beyond the grant, Utah businesses can tap additional support through state programs and federal resources. No Utah state program was found that directly funds or subsidizes CMMC certification or assessment costs; the closest state-level resources are advisory or general-purpose, not CMMC-specific funding.
Utah APEX Accelerator
Part of the Governor's Office of Economic Development (formerly the Utah Procurement Technical Assistance Center/PTAC). Offers free counseling, training, bid-matching, and government registration and certification assistance, including explicit support and advice on implementing responses to federal and DoD cybersecurity requirements under FAR 52.204-21 and DFARS 252.204-7012/252.204-7024. This is advisory and technical assistance, not direct grant funding.
Economic Assistance Grant (EAG)
Administered by the Governor's Office of Economic Opportunity, the EAG is a general economic-development grant (up to $200K per project) that prioritizes Utah's targeted industries, including Aerospace & Defense and Software & IT. It is not a cybersecurity- or CMMC-specific program, so eligibility and use of funds for compliance costs should be confirmed directly with the office.
State & Local Cybersecurity Grant Program (SLCGP)
Federal match funding administered at the state level, but it is directed at local governments and municipalities, not private defense contractors, so it is not a path to CMMC funding for most businesses on this page.
The grant
How much does a CMMC gap assessment cost in Utah?
Through the CMMC gap assessment grant, it is a $5,000 in-kind award, no cash changes hands. You receive the assessment itself, delivered by a certified partner. 100 grants are available.
Confirm you qualify
Open to U.S. defense contractors and manufacturers in the supply chain that hold or pursue DoD contracts and have not yet completed a CMMC assessment.
Get assessed against NIST 800-171
A certified partner reviews your current controls and produces a scored gap report showing what stands between you and CMMC Level 2.
Leave with a remediation plan
You receive a prioritized action list and the resources that can fund the fixes, so compliance becomes a budget line, not a guess.
Questions
Frequently asked questions — Utah CMMC grants
Who qualifies for the CMMC gap assessment grant in Utah?
The grant is open to U.S. defense contractors and manufacturers in the DoD supply chain that hold or are pursuing DoD contracts and have not yet completed a CMMC assessment. Utah businesses supporting Hill Air Force Base and the Ogden Air Logistics Complex, Dugway Proving Ground, or the Utah National Guard are typical candidates.
How much does a CMMC gap assessment cost in Utah?
Through the Cyber Grants Alliance program, the assessment is delivered as a $5,000 in-kind grant, no cash award. You receive the assessment itself from a certified partner. 100 grants are available.
What is Utah's MEP center?
The University of Utah Manufacturing Extension Partnership (MEP) Center in Salt Lake City is the official NIST MEP National Network representative for Utah. It has a history of cybersecurity-adjacent programming, including a 2017 workshop on NIST SP 800-171 compliance run jointly with the Utah PTAC (now the Utah APEX Accelerator). Its current CMMC-specific service offerings are not confirmed on its public site, so contractors should contact the center directly to ask what it currently offers.
Is CMMC Level 2 enforcement still happening on November 10, 2026?
No. DoD suspended the CMMC Phase 2 third-party (C3PAO) certification requirement on July 13, 2026, pending a program review, so there is no confirmed enforcement date at this time. Phase 1 self-assessment against all 110 NIST SP 800-171 controls remains mandatory now, and self-certified SPRS scores carry more liability while third-party verification is paused. A gap assessment is still the essential first step.
Do subcontractors in Utah need CMMC?
If your contract or a prime's contract involves Controlled Unclassified Information, CMMC requirements generally flow down to subcontractors that handle that information. A gap assessment is the fastest way to confirm what applies to you.
Ready when you are
Apply for your CMMC gap assessment grant
100 in-kind awards, $5,000 each. Confirm eligibility and submit in minutes.